linux:linux_audit_user_commands
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision | |||
|
linux:linux_audit_user_commands [2025/09/14 20:56] manu |
linux:linux_audit_user_commands [2025/09/15 19:21] (current) manu |
||
|---|---|---|---|
| Line 3: | Line 3: | ||
| Set PROMPT_COMMAND to log every command to syslog | Set PROMPT_COMMAND to log every command to syslog | ||
| <cli prompt='#'> | <cli prompt='#'> | ||
| - | PROMPT_COMMAND='history -a >(logger -t "[$USER] $SSH_CONNECTION")' | + | PROMPT_COMMAND='history -a >(tee -a $HISTFILE | logger -p local6.notice -t "[$USER] $SSH_CONNECTION")' |
| </cli> | </cli> | ||
linux/linux_audit_user_commands.1757876213.txt.gz · Last modified: 2025/09/14 20:56 by manu
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: GNU Free Documentation License 1.3
